Lucene search
+L

26 matches found

CNNVD
CNNVD
added 2025/07/28 12:00 a.m.11 views

PHPGurukul Bank Locker Management System 安全漏洞

Bank Locker Management System is a bank locker management system. Bank Locker Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /banker/change-password.php. No detailed vulnerability details are available at this time...

7.1CVSS6.9AI score0.00289EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/07/28 12:00 a.m.8 views

PHPGurukul Car Washing Management System 安全漏洞

Car Washing Management System is a car wash management system. Car Washing Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /doctor/change-password.php, no details of the vulnerability are provided at this time...

7.5CVSS6.9AI score0.0039EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2025/07/28 12:00 a.m.6 views

CVE-2025-50490

Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

7.5CVSS6AI score0.00404EPSS
SaveExploits1References4
CVE
CVE
added 2025/04/18 12:00 a.m.73 views

CVE-2025-28059

CVE-2025-28059 affects Nagios Network Analyzer 2024R1.0.3. Root cause: improper session invalidation and stale token handling after user deletion, causing active sessions and API tokens to remain valid and grant access to restricted functions. Impact: unauthorized access to system resources. Expl...

7.5CVSS6.8AI score0.00785EPSS
SaveExploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2023/02/10 12:06 p.m.50 views

Security Bulletin: IBM MQ Appliance is vulnerable to improper session invalidation (CVE-2022-40230)

Summary IBM MQ Appliance has resolved an improper session validation vulnerability. Vulnerability Details CVEID:CVE-2022-40230 DESCRIPTION: IBM MQ Appliance does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. CVSS Base score:...

6.5CVSS6.3AI score0.00446EPSS
SaveExploits0Affected Software1
Typo3
Typo3
added 2014/05/22 12:00 a.m.208 views

Multiple Vulnerabilities in TYPO3 CMS

It has been discovered that TYPO3 CMS is vulnerable to Cross-Site Scripting, Insecure Unserialize, Improper Session Invalidation, Authentication Bypass, Information Disclosure and Host Spoofing. Component Type: TYPO3 CMS Vulnerability Types: Cross-Site Scripting, Insecure Unserialize, Improper...

6CVSS6AI score0.04465EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder